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(54) Derivation and quantization of robust non-local characteristics tor blind watermarking 



(57) An implementation of a technology is described 
herein for deriving robust non-local characteristics and 
quantizing such characteristics for blind watermarking 
of a digital good. This technology finds the proper bal- 
ance between minimizing the probability of false alarms 
(i.e.. detecting a non-existent watermark) and the prob- 
ability of misses (i.e.. failing to detect an existing water- 
mark). The technology, described herein, performs 
quantization index modulation (QIM) based upon non- 
local characteristics of the digital good. Non-local char- 
acteristics may include statistics (e.g., averages, medi- 
an) of a group of individual parts (e.g., pixels) of a digital 
good. This abstract itself is not intended to limit the 
scope of this patent. The scope of the present invention 
is pointed out in the appending claims. 



122 



2\- 



Content Producer/Provider 



130- 




Watermark 
Encoding 
System 



132 



Distribution 
Server 



134 



^- 100 



7 



v. 



124 




125 



140 Client r 142 



Processor 



Content 
Output 
Device (s) 



144 



Memory 



Operating Systo 



Watermark 
Detecting 
System 



Content Loader j 



150 



152 



154 



CL 
ID 



Pnntod by Jouvc. 7S001 PARIS (PR) 



EP 1 253 784 A2 



Description 
TECHNICAL FIELD 

[0001] This invention generally relates to a technology for deriving robust non-local characteristics and quantizing 
such characteristics for blind watermarking of a digital good. 

BACKGROUND 

[0002] "Digital goods - is a generic label for electronically stored or transmitted content. Examples of digital goods 
include images, audio clips, video, digital film, multimedia, software, and data!* Digital goods may also be called a 
"digital signal," "content signal," "digital bitstream," "media signal," "digital object," "object," and the like. 
[0003] Digital goods are often distributed to consumers over private and public networks — such as Intranets and the 
Internet. In addition, these goods are distributed to consumers via. fixed computer readable media, such as a compact 
disc (CD- ROM), digital versatile disc (DVD), soft magnetic diskette, or hard magnetic disk (e.g. , a preloaded hard drive). 
[0004] Unfortunately, it is relatively easy for a person to pirate the pristine digital content of a digital good at the 
expense and harm of the content owners — which includes the content author, publisher, developer, distributor, etc. 
The content-based industries (e.g., entertainment, music, film, etc.) that produce and distribute content are plagued 
by lost revenues due to digital piracy. 

[0005] Modem digital pirates effectively rob content owners of their lawful compensation. Unless technology provides 
a mechanism to protect the rights of content owners, the creative community and culture will be impoverished. 

Watermarking 

[0006] Watermarking is one of the most promising techniques for protecting the content owner's rights of a digital 
good (i.e., digital good). Generally, watermarking is a process of altering the digital good such that its perceptual char- 
acteristics are preserved. More specifically, a "watermark" is a pattern of bits inserted into a digital good that may be 
used to identify the content owners and/or the protected rights. 

[0007] Watermarks are designed to be completely invisible or, more precisely, to be imperceptible to humans and 

statistical analysis tools. Ideally, a watermarked signal is perceptually identical to the original signal. 

[0008] A watermark embedder (i.e., encoder) embeds a watermark into a digital good. It typically uses a secret key 

to embed the watermark. A watermark detector (i.e., decoder) extracts the watermark from the watermarked digital 

good. 

Blind Watermarking 

[0009] To detect the watermark, some watermarking techniques require access to the original unmarked digital good 
or to a pristine specimen of the marked digital good. Of course, these techniques are not desirable when the watermark 
detector is available publicly. If publicly available, then a malicious attacker may get access to the original unmarked 
digital good or to a pristine specimen of the marked digital good. Consequently, these types of techniques are not used 
for public detectors. 

[001 0] Alternatively, watermarking techniques are "blind." This means that they do not require access to the original 
unmarked digital good or to a pristine specimen of the marked digital good. Of course, these "blind" watermarking 
techniques are desirable when the watermark detector is publicly available. 

Robustness 

[001 1] Before detection, a watermarked signal may undergo many possible changes by users and by the distribution 
environment. These changes may include unintentional modifications, such as noise and distortions. Moreover, the 
marked signal is often the subject of malicious attacks particularly aimed at disabling the detection of the watermark. 
[001 2] Ideally, a watermarking technique should embed detectible watermarks that resist modifications and attacks 
as long as they result in signals that are of perceptually the same quality. A watermarking technique that is resistant 
to modifications and attacks may be called "robust." Aspects of such techniques are called "robust" if they encourage 
such resistance. 

[0013] Generally speaking, a watermarking system should be robust enough to handle unintentional noise introduc- 
tion into the signal (such noise my be introduced by A/D and D/A conversions, compressions/decompressions, data 
corruption during transmission, etc.) 

[0014] Furthermore, a watermarking system should be robust enough and stealthy enough to avoid purposeful and 
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malicious detection , alternation, and/or deletion of the watermark. Such an attack may use a "shotgun" approach where 
no specific watermark is known or detected (but is assumed to exist) or may use "sharp-shooter approach where the 
specific watermark is attacked. 

[0015] This robustness problem has attracted considerable attention. In general, the existing robust watermark tech- 
5 niques tall into two categories: spread-spectrum and quantization index modulation (QIM). 

[0016] With the spread spectrum-type techniques, the watermark indexes the modification to the host data. The host 
data is the data of the original, unmarked digital signal (i.e., host signal). With typical spread-spectrum watermarking, 
each bit (e.g., 0s and 1s) of the watermark is embedded into the signal by slightly changing (e.g., adding a pseudor- 
andom sequence that consists of +A or +A) the signal. • 
10 [0017] With quantization index modulation (QIM), the watermark is embedded via indexing the modified host data. 
The modified host data is the data of the marked digital signal (i.e., marked host signal). This is discussed in more 
detail below. 

[0018] Those of ordinary skill in the art are familiar with conventional techniques and technology associated with 
watermarks watermark embedding, and watermark detecting. In addition, those of ordinary skill in the art are familiar 
is with the typical problems associated with proper watermark detection after a marked signal has undergone changes 
(e.g., unintentional noise and malicious attacks). 

Desiderata of Watermarking Technology 

20 [0019] Watermarking technology has several highly desirable goals (i.e., desiderata) to facilitate protection of cop- 
yrights of content publishers. Below are listed several of such goals. 

Perceptual Invisibility . 

25 [0020] The embedded information should not induce perceptual changes in the signal quality of the resulting water- 
marked signal. The test of perceptual invisibility is often called the "golden eyes and ears" test. 

Statistical Invisibility . 

30 [0021] The embedded information should be quantitatively imperceptive for any exhaustive, heuristic, or probabilistic 
attempt to detect or remove the watermark. The complexity of successfully launching such attacks should be well 
beyond the computation power of publicly available computer systems. Herein, statistical invisibility is expressly in- 
cluded within perceptual invisibility. 

35 Tamperproofness . 

[0022] An attempt to remove the watermark should damage the value of the digital good well above the hearing 
threshold. 

40 C0St . 

[0023] The system should be inexpensive to license and implement on both programmable and application-specific 
platforms. 

45 Non-disclosure of the Original . 

[0024] The watermarking and detection protocols should be such that the process of proving digital good content 
copyright both in-situ and in-court, does not involve usage of the original recording. 

so Enforceability and Flexibility. 

[0025] The watermarking technique should provide strong and undeniable copyright proof. Similarly, it should enable 
a spectrum of protection levels, which correspond to variable digital good presentation and compression standards. 

55 Resilience to Common Attacks. 

[0026] Public availability of powerful digital good editing tools imposes that the watermarking and detection process 
is resilient to attacks spawned from such consoles. 
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False Alarms & Misses 

[0027] When developing a watermarking technique, one does not want to increase the probability of a false alarm. 
That is when a watermark is detected, but none exists. This is something like finding evidence of a crime that did not 
happen. Someone may be falsely accused of wrongdoing. 

[0028] As the probability of false alarms increases, the confidence in the watermarking technique decreases. For 
example, people often ignore car alarms because they know that more often than not it is a false alarm rather than an 
actual car theft. 

[0029] Likewise, one does not want to increase the probability of a miss. This is when the watermark of a signal is 
not properly detected. This is something like overlooking key piece of evidence at a crime scene. Because of this, a 
wrongdoing may never be properly investigated. As the probability of misses increases, the confidence in the water- 
marking technique decreases. 

[0030] Ideally, the probabilities of a false alarm and a miss are zero. In reality, a compromise is often made between 
them. Typically, a decrease in the probability of one increases the probability of the other. For example, as the probability 
of false alarm is decreased, the probability of a miss increases. 

[0031] Consequently, a watermarking technique is needed that minimizes both while finding a proper balance be- 
tween them 

Quantization Index Modulation (QIM) 

[0032] To that end some have proposed embedding a watermark by indexing the signal (e.g., host data) during the 
watermark embedding. This technique is called quantization index modulation (QIM) and it was briefly introduced 
above. 

[0033] In general, quantization means to limit the possible values of (a magnitude or quantity) to a discrete set of 
values. Quantization may be thought of as aconversion from non-discrete (e.g., analog or continuous) values to discrete 
values. Alternatively it may be a conversion between discrete values with differing scales. Quantization may be ac- 
complished mathematically through rounding or truncation. Typical QIM refers to embedding information by first mod- 
ulating an index or sequence of indices with the embedded information and then quantizing the host signal with the 
associated quantizer or sequence of quantizers. A quantizer is class of discontinuous, approximate-identity functions. 
[0034] The major proponent of such QIM techniques is Brian Chen and Gregory W. Wornell (i.e., Chen-Wornell). In 
their words, they have proposed, "dither modulation in which the embedded information modulates a dither signal and 
the host signal is quantized with an associated dither quantizer" (from Abstract of Chen-Womell article from the IEEE 
Trans, inform. Theory). 

[0035] See the following documents for more details on Chen-Wornell's proposals and on QIM: 

B. Chen and G.W. Wornell, "Digital watermarking and information embedding using dither modulation." Proc. IEEE 
Workshop on Multimedia Signal Processing, Redondo Beach, CA, pp. 273-278, Dec. 1 998; 

• B. Chen and G. W. Wornell, "Dither modulation: a new approach to digital watermarking and information embed- 
ding," Proc. of SPIE: Security and Watermarking of Multimedia Contents, vol. 3657, pp. 342-353, 1999; 

• B. Chen and G. W. Wornell, "Quantization Index Modulation: A class of Provably Good Methods for Digital Water- 
marking and Information Embedding," IEEE Trans. Inform. Theory, 1999 and 2000. 

Limitations of Conventional QIM 

[0036] However, a key problem with conventional QIM is that it is susceptible to attacks and distortions. Conventional 
QIM relies upon local characteristics within relative to specific representation of a signal (e.g., in the time or frequency 
domain). To quantize, conventional QIM relies exclusively upon the values of "individual coefficients" of the represen- 
tation of the signal. An example of such an "individual coefficients" is the color of an individual pixel of an image. 
[0037] When quantizing, only the local characteristics of an "individual coefficient" are considered. These local char- 
acteristics may include value (e.g., color, amplitude) and relative positioning (e.g., positioning in time and/or frequency 
domains) of an individual bit (e.g., pixel). 

[0038] Modifications— from either an attack or some type of unintentional noise— can change local characteristics 
of a signal quite dramatically. For example, these modifications may have a dramatic affect on the color of a pixel or 
the amplitude of a bit of sound. However, such modifications have little effect on non-local characteristics of a signal. 
[0039] Accordingly a new and robust watermarking technique is needed to findthe proper balance between mini- 
mizing the probability of false alarms and the probability of misses, such as QIM watermarking techniques. However, 
such a technique is needed that is less susceptible to attacks and distortions to the local characteristics within a signal. 
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SUMMARY 

[0040] Described herein is a technology for deriving robust non-local characteristics and quantizing such character- 
istics for blind watermarking of a digital good. 

[0041] This technology finds the proper balance between minimizing the probability of false alarms (i.e., detecting a 
non-existent watermark) and the probability of misses (i.e., failing to detect an existing watermark). One possible tech- 
nique is quantization index modulation (QIM) watermarking. However conventional QIM is susceptible to attacks and 
distortions to the local characteristics of a digital good. 

[0042] The technology, described herein, performs QIM based upon non-local characteristics of the digital good. 
Non-local characteristics may include statistics (e.g., averages, median) of a group of individual parts (e.g., pixels) of 
a digital good. 

[0043] This summary itself is not intended to limit the scope of this patent. Moreover, the title of this patent is not 
intended to limit the scope of this patent. For a better understanding of the present invention, please see the following 
detailed description and appending claims, taken in conjunction with the accompanying drawings. The scope of the 
present invention is pointed out in the appending claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0044] The same numbers are used throughout the drawings to reference like elements and features. 
[0045] Fig. 1 is a schematic block diagram showing a watermarking architecture in accordance with an implemen- 
tation of the invention claimed herein. 

[0046] Fig. 2 is a schematic block diagram showing an embodiment (e.g., a watermark embedding system) of the 
invention claimed herein. 

[0047] Fig. 3 is a flow diagram showing an illustrative methodological implementation (e.g., watermark embedding) 
of the invention claimed herein. 

[0048] Fig. 4 is a schematic block diagram showing an embodiment (e.g., a watermark detecting system) of the 
invention claimed herein. 

[0049] Fig. 5 is a flow diagram showing an illustrative methodological implementation (e.g., watermark detecting) of 
the invention claimed herein. 

[0050] Fig. 6 is an example of a computing operating environment capable of implementing an implementation (wholly 
or partially) of the invention claimed herein. 

DETAILED DESCRIPTION 

[0051] In the following description, for purposes of explanation, specific numbers, materials and configurations are 
set forth in order to provide a thorough understanding of the present invention. However, it will be apparent to one 
skilled in the art that the present invention may be practiced without the specific exemplary details. In other instances, 
well-known features are omitted or simplified to clarify the description of the exemplary implementations of present 
invention thereby better explain the present invention. Furthermore, for ease of understanding, certain method steps 
are delineated as separate steps; however, these'separately delineated steps should not be construed as necessarily 
order dependent in their performance. 

[0052] The following description sets forth one or more exemplary implementations of a Derivation and Quantization 
of Robust Non-Local Characteristics for Blind Watermarking that incorporate elements recited in the appended claims. 
These implementations are described with specificity in order to meet statutory written description, enablement, and 
best-mode requirements. However, the description itself is not intended to limit the scope of this patent. 
[0053] The inventors intend these exemplary implementations to be examples. The inventors do not intend these 
exemplary implementations to limit the scope of the claimed present invention. Rather, the inventors have contemplated 
that the claimed present invention might also be embodied and implemented in other ways, in conjunction with other 
present or future technologies. 

[0054] An example of ah embodiment of a Derivation and Quantization of Robust Non-LocaS Characteristics for Blind 
Watermarking may be referred to as "exemplary non-local QIM watermarker." 

incorporation by Reference 

[0055] The following co-pending patent applications are incorporated by reference herein (which are all assigned to 
the Microsoft Corportaion): 

• U.S. Patent Application Serial No. 09/390271 , entitled "A Technique for Watermarking an Image and a Resulting 
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Watermarked* Image" filed Sept. 7, 1999; 

U.S. Patent Application Serial No. 09/390272, entitled "A Technique for Detecting a Watermark in a Marked Image" 
filed on Sept. 7, 1999; 

♦ U.S. Patent Application Serial No. 09/614,660, entitled "Improved Stealthy Audio Watermarking" filed on July 
12,2000,; and 

♦ U.S. Patent Application Serial No. 09/31 6,899, entitled "Audio Watermarking with Dual Watermarks" filed on May 
22, 1999. 

Introduction 

[0056] The one or more exemplary implementations, described herein, of the present claimed invention may be 
implemented (in whole or in part) by a non-local QIM watermarking architecture 1 00 and/or by a computing environment 
like that shown in Fig. 6. 

[0057] In general, the exemplary non-local QIM watermarker derives robust non-local characteristics of a digital 
good. It quantizes such characteristics for blind watermarking of the digital good. 

[0058] The exemplary non-local QIM watermarker minimizes the probability of false alarms (i.e., detecting a non- 
existent watermark) and the probability of misses (i.e., failing to detect an existing watermark). It does so by employing 
quantization index modulation (QIM) watermarking. However, it does not employ conventional QIM techniques because 
Ihey are susceptible to attacks and distortions to the local characteristics of a digital good. 

Local Characteristics 

[0059] Conventional QIM relies upon local characteristics within a signal (i.e., a digital good). To quantize, conven- 
tional QIM relics exclusively upon the values of "individual elements" of the host signal. When quantizing, only the local 
characteristics of an "individual element" are considered. These local characteristics may include value (e.g., color, 
amplitude) and relative positioning (e.g., positioning in time and/or frequency domains) of an individual bit (e.g., pixel)! 
[0060] Modifications — from either an attack or unintentional noise — can change local characteristics of a signal quite 
dramatically. For example, these modifications may have a dramatic affect on the color of a pixel or the amplitude of 
a bit of sound. However, such modifications have little effect on non-local characteristics of a signal. 

Non-Local Characteristics 

[0061] Non-local characteristics are representative of general characteristics of a group or collection of individual 
elements. Such a group may be called a segment. Non-local characteristics are not representative of the individual 
local characteristics of the individual elements; rather, they are representative of the group (e.g., segments) as a whole. 
[0062] The non-local characteristics may be determined by a mathematical or statistical representation of a group. 
For example, it may be an average of the color values of all pixels in a group. Consequently, such non-local charac- 
teristics may also be called "statistical characteristics." Local characteristics do not have statistical characteristics be- 
cause a fixed value for a given category. Thus, no statistics are derived from a single value. 

[0063] The non-local characteristics are not local characteristics. They are not global characteristics. Rather, they 
are in between. Consequently, they may also be called "semi-global" characteristics. 

Brief Overview 

[0064] Given an original, unmarked good., the exemplary non-local QIM watermarker derives robust characteristics 
that are not local in nature. For example, the exemplary non-local QIM watermarker may employ randomized non- 
invertible transforms to produce robust non-local characteristics that can be modified without perceptual distortion. 
These characteristics are typically represented statistically and/or mathematically. 

[0065] To embed the watermark, the exemplary non-local QIM watermarker performs quantization of these non-local 
characteristics in one or more dimensional lattices or vector spaces. The marked good that results from the exempfary 
non-local QIM watermarker is robust against unintentional and intentional modifications (e.g., malicious attacks). Ex- 
amples of malicious attacks include de-synching, random bonding, and many other benchmark attacks (e.g., Stirmark 
attacks). 

Exemplary Non-Local QIM Watermarking Architecture 

[0066] Fig. 1 shows a digital goods production and distribution architecture 100 (i.e., non-local QIM watermarking 
architecture 100) having a content producer/provider 122 that produces original content and distributes the content 
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over a network 1 24 to a client 1 26. The content producer/provider 122 has a content storage 1 30 to store digital goods 
containing original content. The content producer 1 22 has a watermark embedding system 1 32 to sign the d.g.tal signals 
with a watermark that uniquely identifies the content as original. The watermark embedding system 132 may be im- 
plemented as a standalone process or incorporated into other applications or an operating system. 
5 [0067] The watermark embedding system 1 32 applies the watermark to a digital signal from the content storage 1 30^ 
Typically, the watermark identifies the content producer 122, providing a signature that is embedded in the signal and 
cannot be cleanly removed. 

r00681 The content producer/provider 122 has a distribution server 134 that distributes the watermarked content over 
the network 124 (e g., the Internet). A signal with a watermark embedded therein represents to a recipient that the 
w signal is being distributed in accordance with the copyright authority of the content producer/provider 1 22. The server 
134 may further compress and/or encrypt the content conventional compression and encryption techniques prior to 
distributing the content over the network 124. 

rO069] Typically, the client 126 is equipped with a processor 140, a memory 142, and one or more content output 
devices 144 (e.g., display, sound card, speakers, etc.). The processor 140 runs various tools to process the marked 
15 signal such as tools to decompress the signal, decrypt the date, filter the content, and/or apply signal controls (tone, 
volume etc ) The memory 142 stores an operating system 150 (such as a Microsoft® Windows 2000® operating 
system), which executes on the processor. The client 1 26 may be embodied in many different ways, including a com- 
puter a handheld entertainment device, a set-top box, a television, an appliance, and so forth. 

[0070] The operating system 1 50 implements a client-side watermark detecting system 1 52 to detect watermarks in 
20 the digital signal and a content loader 1 54 (e.g., multimedia player, audio player) to facilitate the use of content through 
the content output device(s) 144. If the watermark is present, the client can identify its copyright and other associated 

information. , . . 

[0071 1 The operating system 1 50 and/or processor 1 40 may be configured to enforce certa.n rules imposed by the 
content producer/provider (or copyright owner). For instance, the operating system and/or processor may be configured 
25 to reject fake or copied content that does not possess a valid watermark. In another example, the system could load 
unverified content with a reduced level of fidelity. 

Exemplary Non-Local QIM Watermark Embedding System 

30 [00721 Fig 2 shows an exemplary non-local QIM watermark embedding system 200. which is an example of an 
embodiment of a portion of the non-local QIM watermarking architecture 100. This system may be employed as the 
watermark encoding system 132 of Fig. 1. 

[00731 The watermark embedding system 200 includes an amplitude normalizer 21 0, a transformer 220, a partitioner 
230 segment-statistics calculator 240, a segment quantizer 250, a delta-sequence finder 260, and a signal marker 270 
35 [00741 The amplitude normalizer 210 obtains a digital signal 205 (such as an audio clip). It may obta.n the s.gnal 
from nearly any source, such as a storage device or over a network communications link. As its name implies, it 
normalizes the amplitude of the signal. 

[00751 The transformer 220 receives the amplitude-normalized signal from the normalizer 210. The transformer 220 
puts the signal in canonical form using a set of transformations. Specifically, discrete wavelet transformation (DWT) 
40 may be employed (particularly, when the input is an image) since it compactly captures significant signal characteristics 
via time and frequency localization. Other transformations may be used. For instance, shift-invariant and shape-pre- 
serving "complex wavelets" and any overcomplete wavelet representation or wavelet packet are good candidates (par- 
ticularly for images). . 
[0076] The transformer 220 also finds the DC subband of the initial transformation of the signal. This DC subband 

« of the transformed signal is passed to the partitioner 230. 

[0077] The partitioner 230 separates the transformed signal into multiple, pseudorandomly sized, pseudorandomly 
positioned adjacent, non-contiguous segments (i.e., partitions). A secret key Kis the seed for pseudorandom number 
generation here. This same Kmay be used to reconstruct the segments by an exemplary non-local QIM watermark 
detecting system 400. 

so [0078] For example, if the signal is an image, it might be.partitioned into two-dimensional polygons (e.g., rectangles) 
of pseudorandom size and location. In another example, if the signal is an audio clip, a two-dimensional representation 
(using frequency and time) of the audio clip might be separated into two-dimensional polygons (e.g., tnangles) of 
pseudorandom size and location. 

[0079] In this implementation, the segments do not overlap. They are adjacent and non-contiguous. In alternative 
55 implementations, the segments may be overlapping. 

[0080] For each segment, the segment-statistics calculator 240 calculates statistics of the multiple segments gen- 
erated by the partitioner 230. Statistics for each segment are calculated. These statistics may be, for example, any 
finite order moments of a segment. Examples of such include the mean, the median, and the standard deviation. 
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[0081 ] Generally, the statistics calculations for each segment are independent of the calculations of other segments. 
However, other alternatives may involve calculations dependent on data from multiple segments. 
[0082] A suitable statistic for such calculation is the mean (e.g., average) of the values of the individual bits of the 
segment. Other suitable statistics and their robustness are discussed in Venkatesan, Koon, Jakubowski, and Moulin, 
"Robust image hashing," Proc. IEEE ICIP2000, Vancouver, Canada, September 2000. In this document, no information 
embedding was considered, but similar statistics were discussed. 

[0083) For each segment, the segment quantizer 250 applies a multi-level (e.g., 2, 3, 4) quantization (i.e., high- 
dimensional, vector-dimensionaL or lattice-dimensional quantization) on the output of the segment-statistics calculator 
240 to obtain quantitized data. Of course, other levels of quantization maybe employed. The quantizer 250 may be 
adaptive or non-adaptive. 

[0084] This quantization may be done randomly also. This may be called randomized quantization (or randomized 
rounding). This means that the quantizer may randomly decide to round up or round down. It may do itpseudorandomly 
(using the secret key). This adds an additional degree of robustness and helps hide the watermark. 
[0085] The delta-sequence finder 260 finds a pseudorandom sequence Zthat estimates the difference (i.e., delta) 
between the original transformed signal X and the combination of segments of quantized statistics. The pseudorandom 
sequence Zmay also be called the delta-sequence. For example, rf the statistic is averaging, then Zs.t. Avg^X + Z) = 
Av 9i(X) = M-,, where X is the marked signal and ft, is average for a segment. 

[0086] When finding a delta-sequence Z, it is desirable to minimize the perceptual distortion; therefore, some per- 
ceptual distortion metrics may be employed to create this sequence. Thus.^n creating Zfor. the criteria may include a 
combination of that minimizes the visual distortions on X+ Z(comparedto X) and minimizes the distance between the 
statistics of X + Zand quantized statistics of X. 

[0087] The signal marker 270 marks the signal with delta-sequence Zso that X= X+ Z. The signal marker may mark 
the signal using QIM techniques. This marked signal may be publicly distributed to consumers and clients. 
[0088] The functions of aforementioned components of the exemplary non-local QIM watermark embedding system 
200 of Fig. 2 are explained in more detail below. 

Methodol ogical Implementation of the Exemplary Non-Local QIM Watermark Embedding 

[0089] Fig. 3 shows the methodological implementation of the.exemplary non-local QIM watermark embedding sys- 
tem 200 (or some portion thereof). More specifically, this figure shows the methodological implementation of watermark 
embedding of the exemplary non-local QIM watermarker. This methodological implementation may be performed in 
software, hardware, or a combination thereof. 

[0090] At 310 of Fig. 3, the exemplary non-local QIM watermarker normalizes the amplitude of the input. The input 
is the original, unmarked signal (i.e., digital good). At 312, it finds a transform of the amplitude-normalized signal and 
gets the lowest frequency band (e.g., the DC subband). The result of this block is a transformed signal. This transfor- 
mation is a discrete wavelet transformation (DWT), but most any other similar transformation may be performed in 
alternative implementations. 

[0091] At 314, the exemplary non-local QIM watermarker partitions the transformed signal into multiple, pseudoran- 
domly sized, pseudorandomly positioned, adjacent, non-contiguous segments. A secret key K is the seed for pseu- 
dorandom number generation here. This same K may be used to reconstruct the segments in the watermark detecting 
process. 

[0092] For example, if the signal is an image, it might be separated into two-dimensional polygons (e.g., rectangles) 
of pseudorandom size and location. In another example, if the signal is an audio clip, a two-dimensional representation 
(using frequency and time) of the audio clip might be separated into two-dimensional polygons (e.g., trapezoids) of 
pseudorandom size and location. 

[0093] In this implementation, the segments do not overlap. They are adjacent and non-contiguous. In alternative 
implementations, the segments may be overlapping. 

[0094] For each segment of the signal, the exemplary non-local QIM watermarker repeats blocks 320 through 330. 
Thus, each segment is processed in the same manner. 

[0095] At 322 of Fig. 3, the exemplary non-local QIM watermarker has a watermark (or a portion thereof) to embed 
in the current segment. It finds quantized values of statistics of the segment (e.g., averages within the segment or as 
close as possible). At this point, scalar uniform quantizer and reconstruction points may be randomly perturbed with 
Kas the seed. 

[0096] At 324, the exemplary non-local QIM watermarker finds a pseudorandom sequence Z where the statistics 
calculation (e.g., averaging) of this sequence combined with the segmented signal generates the calculation of water- 
marked signal segment. This is also equal to the quantized statistics of the signal segment. 

[0097] At 330, the process loops back to 320 for each unprocessed segment. If all segments have been processed, 
then it proceeds to 340. 
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[0098] Ai 340 of Fig. 3. the exemplary non-local OIM watermarker combines the pseudorandom sequence with the 
signal segments to get the watermarked signal segments. In addition, the watermarKed signal segments are comb.ned 
to form a full watermarked signal. In other words, X = X + Z. At 350, the process ends. 

Exemplary Non-Local QIM Watermark Detecting System 

100991 Fig 4 shows an exemplary non-local QIM watermark detecting system 400, which is an example of an em- 
bodiment of a portion of the non-local QIM watermarking architecture 100. This system may be employed as the wa- 
termark detecting system 152 of Fig. 1. 

[0100] The watermark detecting system 400 includes an amplitude normalizer 41 0, a transformer 420, a partrt.oner 
430, segment-statistics calculator 440, a segment MAP decoder 450, a watermark-presence determiner 460, a pre- 
senter 470, and a display 480. 

[01 01] The amplitude normalizer 41 0, the transformer 420, the partitioner 430, and the segment-statist.cs calculator 
440 of the watermark detecting system 400 of Fig. 4 function in a similar manner as similarly labeled components of 
the watermark embedding system 200 of Fig. 2. The exception is that the object of these components is a subject 
signal" rather than the original signal. A "subject signal" signal is an unknown. It may or may not include a watermark. 

It may have been modified. ^„„^ ir ,„ 
[0102] For each segment, the segment MAP decoder 450 determines a quantized value us.ng the MAP decod.ng 
scheme. In general, MAP techniques involve finding (and possibly rank.ng by distance) all objects (in this instance, 
quantized values) in terms of their distance from a -point." In this example, the "point" is the statistics calculated for a 
given segment. Nearest-neighbor decoding is one specific instance of MAP decoding. Those of ordinary sk.ll in the art 
understand and appreciate MAP and nearest-neighbor techniques. 

[01031 In addition the segment MAP decoder 450 determines a confidence factor based upon the distance between 
the quantized values and the statistics calculated for a given segment. If they are coexistent, then factor will indicate 
a high degree of confidence. If they are distant, then it may indicate a low degree of confidence. Furthermore, the 
decoder 450 combines the confidence factors of the segments to get an overall confidence factor. That combination 
may be most any statistical combination (e.g., addition, average, median, standard deviation, etc.). 
[0104] The watermark-presence determiner 460 determines whether a watermark is present. The determiner may 
use some distortion metric d( w. w) and some thresholdT to decide if watermark is present or not. A normalized Hamming 
distance may be used. 

[0105] The presenter 470 presents one of three indications: "watermark present," "watermark not present, and un- 
known." If the confidence factor is low, it may indicate "unknown." In addition, it may present the confidence-.nd.cat.on 

[0106] This information is presented on the display 480. Of course, this display may be any output device. It may 

also be a storage device. , 
[0107] The functions of aforementioned components of the exemplary non-local QIM watermark detecting system 

400 of Fig. 4 are explained in more detail below. 

Methodological Implementation of the Exemplary Non-Local Q IM Watermark Detecting 

[0108] Fig 5 shows the methodological implementation of the exemplary non-local QIM watermark detecting system 
400 (or some portion thereof). More specifically, this figure shows the methodological implementation of watermark 
detecting of the exemplary non-local QIM watermarker. This methodological implementation may be performed in 

software, hardware, or a combination thereol. . 

[0109] At 510 of Fig 5, the exemplary non-local QIM watermarker normalizes the amplitude of the input. The input 
is an unknown specimen (i.e., signal) of a digital good. It is not known whether this signal includes a watermark or not 
[0110] At 512 il finds a transform of the amplitude-normalized signal and gels significant frequency subband. That 
may be a low or the lowest subband (e.g. , the DC subband). Generally, the subband selected may be one that represents 
the signal is a manner that helps further robust watermarking and detection of the watermark. The lower frequency 
subbands are suitable because they tend to remain, relatively invariant after signal perturbation. 
[0111] The result of this block is a transformed signal. When watermarking an image, an example of a suitable 
transformation is discrete wavelet transformation (DWT). When watermarking an audio clip, an example of a suitable 
transformation is MCLT (Modulated Complex Lapped Transform). However, most any other similar transformation may 
be performed in alternative implementations. 

[0112] At 514 the exemplary non-local QIM watermarker partitions the transformed signal into multiple, pseudoran- 
domly sized pseudorandomly positioned, adjacent, non-contiguous segments. It uses the same secret key K is the 
seed for its pseudorandom number generation here. Therefore, this process generates the same segments as in the 
embedding process. 
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[0113] For each segment of the signal, the exemplary non-local QIM watermarker repeats blocks 520 through 530. 
Thus, each segment is processed in the same manner. 

[0114] At 522 of Fig. 5. the exemplary non-local QIM watermarker finds statistics of the segment (e.g., averages 
within the segment). At 524. the exemplary non-local QIM watermarker finds decoded watermark (or a portion thereof) 
5 using Maximum A Posteriori (MAP) decoding. An example of such a MAP decoding is nearest-neighbor decoding. 
[01 1 5] At 526, it measures how close each decoded value is to a quantized value and tracks such measurements. 
The data provided by such measurements may provide an indication of the confidence of a resulting watermark-pres- 
ence determination. 

[01 1 6] At 530, the process loops back to 520 for each unprocessed segment. If all segments have been processed 

io then it proceeds to 540. 

[0117] At 540 of Fig. 5, the exemplary non-local QIM watermarker determines whether a watermark is present. At 
542, it determines a confidence-indication, which is based upon the tracked measurement data. 
[0118] At 544, based upon the watermark-presence determination of block 540 and the confidence-indication of 
block 544, the exemplary non-local QIM watermarker provides one of three indications: watermark present, watermark 

'5 not present, and unknown. In addition, it may present the confidence-indication value. 
[01 1 9] At 550, the process ends. 

Probability of False Alarms and Misses 

so [0120] There is a relationship between Probability of false alarm (P F ), Probability of rniss (P M ), and the average sizes 
of the segments. P F is the probability of declaring that a watermark is present even though it is not. P M is the probability 
declaring that a watermark is not present although it is present indeed. Generally, the average segment size is relatively 
directly proportional to the P F , but it is relatively indirectly proportional to the P M . 

[01 21 ] For example, if the average segment-size is extremely small. So small that they are equivalent to the individual 
25 bits (e.g., equal to a pixel in an image. In that situation, watermarks are embedded in single coefficients, which is 
equivalent to the conventional schemes based on local characteristics. For such a case, P F is very small and P M is 
high. Conversely, if the average segment-size is extremely large. So large that it is the maximum size of the signal (e. 
g., the whole image). In that situation, P M is presumably very low whereas P F is high. 

30 Other Implementation Details 

[0122] For the following descriptions of an implementation of the exemplary non-local QIM watermarker, assume the 
following: 

[0123] The input signal Xis an image. Of course, for signal may be other types for other implementations. However, 
for this example implementation, the signal is an image. Let w be the watermark (a binary vector) to be embedded in 
X and a random binary string Kbe the secret key. The output of a watermark encoder, Xis the watermarked image in 
which the information w is hidden via the secret key K. This image will possibly undergo various attacks, yielding x A 
watermark decoder, given X and the secret key K outputs w. It is required that X and X are approximately the same 
for all practical purposes and that X is still of acceptable quality The decoder uses some distortion metric d(w>fc} and 
some threshold Tto decide if watermark is present or not. The exemplary non-local QIM watermarker use a normalized 
Hamming distance, which is the ratio of the usual Hamming distance and the length of the inputs. 
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WM via Quantization 



[0124] The exemplary non-local QIM watermarker computes a vector u, by applying a forward transformation T F on 
X. The exemplary non-local QIM watermarker assumes that Xis a grayscale image; if not, a linear transformation may 
be applied on a colored image to obtain the intensity image. (For colored images, most of the energy is concentrated 
in the intensity plane). Once the information hiding process is done via quantization, there is £, and the watermarked 
Xdata are obtained by applying the transform T R on £. The exemplary non-local QIM watermarker randomizes the 
process using a random string derived from our secret key Kas a seed to a pseudo-random generator. 
[0125] The scheme is generic. So most any transform maybe used. In addition, T F = (T fl )" 1 need not be true, or even 
that their inverses exist. The exemplary non-local QIM watermarker does not constrain the space where quantization 
occurs. The decoder applys the transform 7>on the input, Y, to get the output is u y and applying approximate Maximum 
Likelihood (ML) estimation of the possibly embedded sequence w Y . Through a pseudo-random generator, K will de- 
termine many randomization functions of the transform, quantization and estimation stages w Y . Once is found, it is 
compared with the embedded watermark w, if the distance between them is close to 0 (or less than a threshold 7), 
then it is declared that the watermark is present; otherwise not present. This contrasts with the natural measure for 
spread spectrum techniques that yields a high value of correlation if the watermark is present. 
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More Details of this Methodological Implementation 

[01261 The transforms Tp and T R help enhance robustness. For Tp to retain significant image characteristics, we 
may use discrete wavelet transformation (DWT) at the initial stage. Next, semi-global (i.e., non-local) statistics of seg- 
ments are determined of the imaqe. The local statistics are not robust. 

[01 27] When the exemplary non-local QIM watermarker computes, for example, the first order statistics of an onginal 
image signal and computes several attacked versions for random rectangles of fixed size. Then the average mean 
squared error between these statistics may be found. The error rnonotonically decays as the size of therectangles is 

increased. . + , 

[0128] in Tp u_ is scl to be the estimated first order statistics of randomly chosen rectangles m the wavelet domain. 
Here T p is not .nvcrtiblc if the number of rectangles is less than the number of coefficients. To choose T R , one might 
first generate a pseudo-random sequence £ in the image domain that has the property to be visually approximately 
unnoticeable pass through T F find the corresponding statistics u^,, compute the necessary scaling factors a such 
that the pseudorandom sequence £ scaled by a and added to X yields the averages u_ that is quantized a. This imple- 
mentation uses randomly chosen non-overlapping rectangles. The exemplary non-local QIM watermarker defines two 
quantizers O 0 and Q, which map vectors in R n to some nearby chosen lattice points. 

[0129] Here is a formal oescr.pl.on. Define 0,:= {{q^S^Z}; <ER"to be reconstruction points for O,; S^carethe 
corresponding quantization bms; ha{0/\) . / e Z . For each j, then S 0 p[(u k ^ 0k )^(r^^ k )] = Si/M^yS^M^o*)] 
= 0. Here c^. arc dctcrmmed in a pseudo-random fashion (using Kas the seed of the random number generator) 
and n is the dimension of qunnti/ation. The exemplary non-local QIM watermarker defines O 0 [a] = q 0y <=> a GE S oy , and 
likewise for Q, Both O 0 and O, are derived from a single quantizer, Q, such that (a) the set of reconstruction points 
of O is equal to {q 0 ,l ~>{q } i } and {b) for all min^ z [E(q^ ,E( qi/ )] = min^^E^ E{q, k )). Let % denote the 
common value (c) for each fixed k. ♦^min /-lr d L2 [E{qb> E(q 0k )) = min^ d^E^E^)] and +, = > % ff or all tj. Here 
drp is the Ls distortion metric, and E(.) is the expectation operator over the pseudo-random choices 
[0130] If, for example n^1. The exemplary non-local QIM watermarker finds {E(q Qj )} and {E(q y )} meeting the re- 
quirements mentioned above Then randomization regions that are neighborhoods in Ft" around {E(q 0j )} and {E(q i; )> 
are introduced. Then [q^} and {q y } are randomly choosen from these regions using some suitable probability distribu- 
tions The sizes of the randomizing regions and their shapes are input parameters. Let nRbe the number of rectangles 
each indexed suitably Let R be the length of the binary watermark vector wto be hidden in rectangles. For a vector, 
v denotes its /-th entry by v{i). Let L denote the number of levels of DWT that is applied. 

Encoding 

[0131] Let Nbethe number of pixels in Xand s:= [s v ...,s w ] be the vector that consists of pixels of Xsorted in ascending 
order Create subvectors s L := [s r ....s,J where t.=round( /V(1 -P)y) and t=round(N^+$)y) and fn^ts^sj where unround 
(/vI1-(1-p)7l)and u*= rouno\N[0 +(3)yj) . Here rounder) equals the nearest integer to rand the system parameters 0<^ 
y«1 . Let m and M be the mean values of the elements of s± and s H respectively. Apply the point operator P[ X ] = 255 
* (X-m)/(M-m) to each element of X to get X' 
[01 32] Find the L-level DWT X. Let X^ be its DC subband. 

[0133] Partition the X* into random non overlapping nR rectangles; calculate £ such that u,(/) is the mean value of 
the coefficients within rectangle /, r<nR. 

[0134] Letu^=[a(n(M^ Use O 0 and Q, ^quantize: for t<R, if w{i) = 0, quantize u' using O 0 

else quantize^' using O v Concatenating the quantized {u/} we get £. a 

[0135] Find the differences between the onginal statistics and the quantized statistics. d=u.-\L. 

[0136] Generate a pseudo-random sequence £=[p$ in the spatial (i.e. the original image) domain as follows: Choose 

p- randomly and uniformly from {0,1} if s^X^s,. where t'=round(t^) and ground (A/(t-y)); otherwise set p if 0. Now 

apply L-level DWT to the matrix £, extract the DC subband of the output and call it £ w . Now compute the corresponding 

statistics similar to the step 

[0137] Compute the scaling factors a such that a(/)= diiy^tj^nR- 

[0138] For each rectangle whose index is i, multiply all coefficients of Rw within that rectangle by a(/), let the resulting 
vector be £ w . 

[01 39] Apply inverse DWT on g w .let the output be p. a 
[0140] Compute the watermarked data: X'=XV£. Apply the inverse of the point operator (see step 1) on X_*to get X. 

Decoding (input V): 

[01 41] Similar to first part of the encoding above, find the corresponding point operator on V. Now apply the operator 
to Y and to the output apply L-level DWT, extract the DC subband and call it v; A . 
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[0142] Applying the partitioning procedure of the encoding above to Y and find its statistics ii y . Let [iy{lj be the Ah 
element. 

[01 43] Using O 0 and Q A , now is described how to carry out approximate ML estimation to find the decoded sequence 
w y : Let 

i£ : = [ey M* - 1) + 1) ... • ,£ Y {ni -1), H Y (ni)] 

[0144] For rectangles indexed by n(/-i)4-1 ,... f n/-1 t n/. t<R, let r0(/) be the closest point to among reconstruction 
points of O 0 ; likewise let rl (/) be the closest point to among reconstruction points of O v If 

then assign w^{/)=0; otherwise jVy{/)=1 . 

[01 45] Compute c*( w/y,, w). If the result is less than threshold 7, declare that the watermark was detected, or otherwise 
not present. 

Exemplary Computing System and Environment 

[0146] Fig. 6 illustrates an example of a suitable computing environment 900 within which an exemplary non-local 
QIM watermarker, as described herein, may be implemented (either fully or partially). The computing environment 900 
may be utilized In the computer and network architectures described herein. 

[0147] The exemplary computing environment 900 is only one example of a computing environment and is not in- 
tended to suggest any limitation as to the scope of use or functionality of the computer and network architectures. 
Neither should the computing environment 900 be interpreted as having any dependency or requirement relating to 
any one or combination of components illustrated in the exemplary computing environment 900. 
[0148] The exemplary non-local QIM watermarker may be implemented with numerous other general purpose or 
special purpose computing system environments or configurations. Examples of well known computing systems, en- 
vironments, and/or configurations that may be suitable for use include, but are not limited to, personal computers, 
server computers, thin clients, thick clients, hand-held or laptop devices, multiprocessor systems, microprocessor- 
based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe com- 
puters, distributed computing environments that include any of the above systems or devices, and the like. 
[0149] The exemplary non-local QIM watermarker may be described in the general context of computer-executable 
instructions ; such as program modules, being executed by a computer. Generally, program modules include routines, 
programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data 
types. The exemplary non-local QIM watermarker may also be practiced in distributed computing environments where 
tasks are performed by remote processing devices that are linked through a communications network. In a distributed 
computing environment, program modules may be located in both local and remote computer storage media including 
memory storage devices. 

[01 50] The computing environment 900 includes a general-purpose computing device in the form of a computer 902. 
The components of computer 902 can include, by are not limited to, one or more processors or processing units 904, 
a system memory 906, and a system bus 908 that couples various system components including the processor 904 
to the system memory 906. 

[0151] The system bus 908 represents one or more of any of several types of bus structures, including a memory 
bus or memory controller, a peripheral bus, an accelerated graphics port, and a processor or local bus using any of a 
variety of bus architectures. By way of example, such architectures can include an Industry Standard Architecture (ISA) 
bus, a Micro Channel Architecture (MCA) bus, an Enhanced ISA (EISA) bus, a Video Electronics Standards Association 
(VESA) local bus, and a Peripheral Component Interconnects (PCI) bus also known as a Mezzanine bus. 
[0152] Computer 902 typically includes a variety of computer readable media. Such media can be any available 
media that is accessible by computer 902 and includes both volatile and non-volatile media, removable and non- 
removable media. 

[0153] The system memory 906 includes computer readable media in the form of volatile memory, such as random 
access memory (RAM) 910, and/or non-volatile memory, such as read only memory (ROM) 912. A basic input/output 
system (BIOS) 914, containing the basic routines that help to transfer information between elements within computer 
902, such as during start-up, is stored in ROM 91 2. RAM 91 0 typically contains data and/or program modules that are 
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immediately accessible to and/or presently operated on by the processing unit 904. 

r0154l Computer 902 may also include other removable/non-removable, volatile/non-volat.le computer storage me- 
dia By way of example, Fig. 6 illustrates a hard disk drive 916 for reading from and writing to a non-removable, non- 
volatile magnetic media (not shown) . a magnetic disk drive 91 8 for reading from and writing to a removable, non-volatile 
magnetic disk 920 (e.g., a "floppy disk"), and an optical disk drive 922 for reading from and/or writing to a removably 
non volatile optical disk 924 such as a CD-ROM, DVD-ROM, or other optical media. The hard d.sk dnve 91 6 magnetic 
disk drive 918 and optical disk drive 922 are each connected to the system bus 908 by one or more data media 
interfaces 926.' Alternatively, the hard disk drive 916, magnetic disk drive 918, and optical disk drive 922 can be con- 
nected to the system bus 908 by one or more interfaces (not shown). 

mi 551 The disk drives and their associated computer-readable media provide non-volatile storage of computer read- 
able instructions, data structures, program modules, and other data for computer 902. Although the example ^strates 
a hard disk 916 a removable magnetic disk 920, and a removable optical disk 924, it is to be appreciated that other 
tvoe= of computer readable media which can store data that is accessible by a computer, such as magnetic cassettes 
or other magnetic storage devices, flash memory cards, CD-ROM, digital versatile disks (DVD) or other optical storage, 
random access memories (RAM), read only memories (ROM), electrically erasable programmable read-only memory 
(EEPROM) and the like, can also be utilized to implement the exemplary computing system and environment. 
01561 Any number of program modules can be stored on the hard disk 91 6, magnetic disk 920, optical d.sk 924, 
ROM 912 and/or RAM 910. including by way of example, an operating system 926, one or more application programs 
928 other program modules 930, and program data 932. Each of such operating system 926, one or more application 
programs 928 other program modules 930, and program data 932 (or some combination thereof) may include an 
embodiment of an amplitude nonnalizer, a transformer, a partitioned a segment-statistics calculator, a segment quan- 
tizer, an delta-sequence finder, and a signal marker. tm ,K««rH oia 
f0157l A user can enter commands and information into computer 902 via input dev.ces such as a keyboard 934 
and a pointing device 936 (e.g., a "mouse"). Other input devices 938 (not shown specifically) may include a microphone, 
joystick game pad. satellite d,sh ; serial port, scanner, and/orthe like. These and other input devices are connected to 
the processing unit 904 via inpuubutput interfaces 940 that are coupled to the system bus 908, but may be connected 
bv other interface and bus structures, such as a parallel port, game port, or a universal senal bus (USB). 
101 581 A monitor 942 or other type of display device can also be connected to the system bus 908 via an .menace, 
such as a video adapter 944 In addition to the monitor 942, other output peripheral devices can .nclude components 
such as speakers (not shown) and a printer 946 which can be connected to computer 902 via the inpuVoutput .menaces 
940 

r0159l Computer 902 can operate in a networked environment using logical connections to one or more remote 
computers such as a remote computing device 948. By way of example, the remote computing device 948 can be a 
personal computer, portable computer, a server, a router, a network computer, a peer device or other common network 
node, and the like. The remote computing device 948 is illustrated as a portable computer that can .nclude many or 
all of the elements and features described herein relative to computer 902. 

101 60] Logical connections between computer 902 and the remote computer 948 are depicted as a local area network 
(LAN) 950 and a general wide area network (WAN) 952. Such networking environments are commonplace m offices, 
enterprise-wide computer networks, intranets, and the Internet. 

f0161l When implemented in a LAN networking environment, the computer 902 is connected to a local network 950 
via a network interface or adapter 954. When implemented in a WAN networking environment, the computer 902 
tvoicallv includes a modem 956 or other means for establishing communications over the wide network 952. The 
modem 956 which can be internal or external to computer 902, can be connected to the system bus 908 v.a the input/ 
output interfaces 940 or other appropriate mechanisms. It is to be appreciated that the illustrated network connections 
are exemplary and that other means of establishing communication link(s) between the computers 902 and 948 can 

l0VB2]*°\na networked environment, such as that illustrated with computing environment 900, program modules de- 
picted relative to the computer 902, or portions thereof, may be stored in a remote memory storage device. By way of 
example remote application programs 958 reside on a memory device of remote computer 948. For purposes of 
so illustration application programs and other executable program components such as the operating system are illus- 
trated herein as discrete blocks, although it is recognized that such programs and components reside at various times 
in different storage components of the computing device 902, and are executed by the data processor(s) of the com- 
puter. 

55 Computer-Executable Instructions 

[01631 An implementation of an exemplary non-local QIM watermarker may be described in the general context of 
computer-executable instructions, such as program modules, executed by one or more computers or other devices. 
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Genr "y, program modules include routines, programs, objects, components, data structures, etc. that perform par- 
ticuie- ..3ks or implement particular abstract data types. Typically, the functionality of the program modules may be 
comc.;;c-d or distributed as desired in various embodiments. 

Exemplary Operating Environment 

[0164] Fig. 6 illustrates an example of a suitable operating environment 900 in which an exemplary non-local QIM 
watermarker may be implemented. Specifically, the exemplary non-local QIM watermarker(s) described herein may 
be implemented (wholly or in part) by any program modules 928-930 anchor operating system 926 in Fig. 6 or a portion 
thereof. 

[0165] The opcralng environment is only an example of a suitable operating environment and is not intended to 
suggest any limitation as to the scope or use of functionality of the exemplary non-local QIM watemnarker(s) described 
herein. Other well known computing systems, environments, and/or configurations that are suitable for use include, 
but are not limited to personal computers (PCs), server computers, hand-held or laptop devices, multiprocessor sys- 
tems, microprocessor-based systems, programmable consumer electronics., wireless phones and equipments, gener- 
al- and special-purpose appliances, application-specific integrated circuits (ASICs), network PCs, minicomputers, 
mainframe computers, distributed computing environments that include any of the above systems or devices, and the 
like. 

Computer Readable Media 

[0166] An implementation of an exemplary non-local QIM watemnarkermay be stored on or transmitted across some 
form of computer readable media. Computer readable media can be any available media that can be accessed by a 
computer. By way of example, and not limitation, computer readable media may comprise "computer storage media" 
and "communications media." 

[01 67] "Computer storage media" include volatile and non-volatile, removable and non-removable media implement- 
ed in any method or technology for storage of information such as computer readable instructions, data structures, 
program modules, or other data Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash 
memory or other memory technology. CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cas- 
settes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be 
used to store the desired information and which can be accessed by a computer. 

[0168] "Communication media" typically embodies computer readable instructions, data structures, program mod- 
ules, or other data in a modulated data signal, such as carrier wave or other transport mechanism. Communication 
media also includes any information delivery media. 

[0169] The term "modulated data signal" means a signal that has one or more of its characteristics set or changed 
in such a manner as to encode information in the signal. By way of example, and not limitation, communication media 
includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, 
infrared, and other wireless media. Combinations of any of the above are also included within the scope of computer 
readable media. 

Conclusion 

[0170] Although the invention has been described in language specific to structural features and/or methodological 
steps, it is to be understood that the invention defined in the appended claims is not necessarily limited to the specific 
features or steps described. Rather, the specific features and steps are disclosed as preferred forms of implementing 
the claimed invention. 



Claims 

1 . A method facilitating protection of digital signals, the method comprising: 

normalizing amplitude of a digital signal, wherein such signal is an original, unmarked signal; 
transforming the normalized signal; 

partitioning the normalized signal transform into segments; 
for one or more segments: 

• calculating statistics of a segment that are representative of that segment; 
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• quantizing such statistics of a segment; 

generating a delta-sequence representing a combination of the quantized statistics of the one or more seg- 
ments or an approximation of the combination; 
marking the digital signal with the delta -sequence. 

2. A method as recited in claim 1 . wherein the partitioning comprises pseudorandomly segmenting the normalized 
signal transform. 

3. A method as recited in claim 1 , wherein the partitioning comprises pseudorandomly segmenting the normalized 
signal transform, wherein such segments are adjacent and non-contiguous. 

4. A method as recited in claim 1 , wherein the transforming comprises finding a low frequency subband. 

5. A method as recited in claim 1 , wherein the transforming comprises finding a significant frequency subband. 

6. A method as recited in claim 1 , wherein the statistics of the calculating comprises one ormore finite order moments 
of a segment. 

7 A method as recited in claim 1 . wherein the generating comprises producing a pseudorandom delta-sequence that 
when combined with the digital signal approximate a combination of the digital signal and the quantized statistics 
of the one ormore segments. 

8. A method as recited in claim 1 , wherein the marking comprises embedding a watermark via quantization index 
25 modulation (QIM). 

9. A modulated signal generated in accordance with the acts recited in claim 1 

10.. A computer-readable. medium having computer-executable instructions that, when executed by a computer, per- 
30 forms the method as recited in claim 1 . 

11 . A computer comprising one or more computer-readable media having computer-executable instructions that, when 
executed by the computer, perform the method as recited in claim 1 

35 12. A method facilitating protection of digital signals, the method comprising: 

normalizing amplitude of a subject digital signal; 
transforming the normalized signal; 

partitioning the normalized signal transform into segments; 
40 for one or more segments: 

• calculating statistics of a segment that are representative of that segment; 

• quantizing such statistics of a segment to generated a quantized value of that segment; 

• measuring the distance between such statistics of a segment and the quantized value of that segment; 

determining whether a watermark is present in the digital signal based upon the quantized values of the one 
or more segments. 

13. A method as recited in claim 12, wherein measuring the distance comprising using perceptual distortion matrics. 

14. A method as recited in claim 12 further comprising: 

determining an indication of confidence based upon the measured distances of the measuring; 
indicating an indication of confidence. 

55 

15. A method as recited in claim 12 further comprising indicating whether a watermark is present. 

16. A method as recited in claim 12 further comprising indicating whether a watermark is present, wherein such indi- 



45 



50 



15 



EP 1 253 784 A2 

cation is selected from a group consisting of "present," "not present," and "unknown." 

17. A method as recited in claim 12. wherein the partitioning comprises pseudorandomly segmenting the normalized 
signal transform. 

18. A method as recited in claim 12, wherein the partitioning comprises pseudorandomly segmenting the normalized 
signal transform, wherein such segments are adjacent and non-contiguous. 

19. A method as recited in claim 12, wherein the transforming comprises finding a low frequency subband. ', 

20. A method as recited in claim 12. wherein the transforming comprises finding a significant frequency subband. 

21 . A method as recited in claim 12. wherein the statistics of the calculating comprises one or more finite order moments 
of a segment. 

22. A method as recited in claim 12. wherein the determining comprises detecting a watermark via quantization index 
modulation (QIM) techniques. 

23. A computer -readable medium having computer-executable instructions that, when executed by a computer, per- 
forms trie method as recited in claim 12. 

24. A computer comprising one or more computer-readable media having computer-executable instructions that, when 
executed by the computer, perform the method as recited in claim 12. 

25. A method facilitating protection of digital signals, the method comprising: 

partitioning a digital signal into segments; 
for one or more segments: 

♦ calculating statistics of a segment that are representative of that segment; 
quantizing such statistics of a segment; 

generating a marked signal approximately equivalent to a combination of the digital signal and the combination 
of the quantized statistics of the one or more segments. 

26. A method as recited in claim 25 further comprising normalizing amplitude of a digital signal, wherein such signal 
is an original, unmarked signal. 

27. A method as recited in claim 25 further comprising transforming the signal. 

28. A method as recited in claim 25, wherein the partitioning comprises pseudorandomly segmenting the signal. 

29. A method as recited in claim 25. wherein the partitioning comprises pseudorandomly segmenting the signal, where- 
in such segments are adjacent and non-contiguous. 

30. A method as recited in claim 25, wherein the statistics of the calculating comprises one ormore finite order moments 
of a segment. 

31. A method as recited in claim 25 further comprising determining a delta-sequence that is representative of the 
combination of the quantized statistics of the one or more segments. 

32. A method as recited in claim 25 further comprising determining a pseudorandom delta-sequence that when com- 
bined with the digital signal approximate a combination of the digital signal and the quantized statistics of the one 
or more segments. 

33. A method as recited in claim 25, wherein the generating comprises embedding a watermark via quantization index 
modulation (QIM). 
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34. A modulated signal generated in accordance with the acts recited in claim 25. 

35. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
forms the method as recited in claim 25. 

36. A computer comprising one or more computer-readable media having computer-executable instructions that, when 
executed by the computer, perform the method as recited in claim 25. 

37. A method facilitating protection of digital signals, the method comprising: 

partitioning a subject digital signal into segments; 
for one or more segments: 

• calculating statistics of a segment that are representative of that segment, 
I5 • quantizing such statistics of a segment to generated a quantized value of that segment; 

determining whether a watermark is present in the digital signal based upon the quantized values of the one 
or more segments. 

20 38. A method as recited in claim 37 further comprising: 

normalizing amplitude of the subject digital signal; 
transforming the normalized signal. 

25 39. A method as recited in claim 37 further comprising: 

for one or more segments, measuring the distance between such statistics of a segment and the quantized 
value of that segment; 

. determining an indication of confidence based upon the measured distances of the measuring; 
30 indicating an indication of confidence. 

40. A method as recited in claim 37 further comprising indicating whether a watermark is present. 

41 A method as recited in claim 37 further comprising indicating whether a watermark is present, wherein such indi- 
35 cation is selected from a group consisting of "present," "not present," and "unknown." 

42. A method as recited in claim 37, wherein the partitioning comprises pseudorandomly segmenting the signal. 

43. A method as recited in claim 37, wherein the partitioning comprises pseudorandomly segmenting the signal, where- 
-io in such segments are adjacent and non-contiguous. 

44. A method as recited in claim 37, wherein the statistics of the calculating comprises one or more finite order moments 
of a segment. 

w 5 45. A method as recited in claim 37. wherein the determining comprises detecting a watermark via quantization index 
modulation (QIM) techniques. 

46. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
forms the method as recited in claim 37. 

47. A computer comprising one or more computer-readable media having computer-executable instructions that, when 
executed by the computer, perform the method as recited in claim 37. 

48. A method for facilitating the protection of digital signals, the method comprising 

55 

obtaining a digital signal; 

obtaining a watermark; . OIM ie 

using quantization index modulation (QIM). watermarking the signal with the watermark, where.n such QIM .s 
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based upon non-local characteristics of the signal. 

49. A method as recited in claim 48. wherein the non-local characteristics are representative characteristics of more 
than a single element of a signal. 

5 

50. A method as recited in claim 48, wherein the non-local characteristics comprise statistics representative of one or 
more segments of the signal. 

51. A method as recited in claim 48, wherein the non-local characteristics comprise statistics representative of one or 
'0 more pseudorandomly sized segments of the signal. 

52. A method as recited in claim 48, wherein the non-local characteristics comprise statistics representative of one or 
more pseudorandomly dimensioned segments of the signal. 

' 5 53. A method as recited in claim 48, wherein the non-local characteristics comprise statistics representative of one or 
more pseudorandomly dimensioned segments of the signal, wherein such segments are adjacent and non-con- 
tiguous. 

54. A modulated signal generated in accordance with the acts recited in claim 48. 

20 

55. A modulated signal generated in accordance with the following acts: 

providing a server computer in a communications with a communications network; 

receiving input from a client computer by way of the communications network, the input providing a parameter 
indicative of a request for a modulated signal generated in accordance with the acts recited in claim 48; 
generating the modulated signal in accordance with the acts recited in claim 48; 
sending the modulated signal via the communications network. 

56. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
30 forms the method as recited in claim 48. 

57. A computer comprising one or more computer-readable media having computer-executable instructions that, when 
executed by the computer, perform the method as recited in claim 48. 

35 58. A method for facilitating the protection of digital signals, the method comprising 
obtaining a digital signal; 

using quantization index modulation (QIM), detecting whether the signal includes a watermark, wherein such 
QIM is based upon non-local characteristics of the signal. 

*o 59. A method as recited in claim 58, wherein the non-local characteristics are representative characteristics of more 
than a single element of a signal. 

60. A method as recited in claim 58, wherein the non-local characteristics comprise statistics representative of one or 
more segments of the signal. 
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61. A method as recited in claim 58, wherein the non-local characteristics comprise statistics representative of one or 
more pseudorandomly sized segments of the signal. 

62. A method as recited in claim 58, wherein the non-local characteristics comprise statistics representative of one or 
more pseudorandomly dimensioned segments of the signal. 

63. A method as recited in claim 58, wherein the non-local characteristics comprise statistics representative of one or 
more pseudorandomly dimensioned segments of the signal, wherein such segments are adjacent and non-con- 
tiguous. 

64. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
forms the method as recited in claim 58. 
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65. A computer comprising one or more computer-readable media having computer-executable instructions that , when 
executed by the computer, perform the method as recited in claim 58. 

66. A system for facilitating the protection of digital signals, the system comprising: 

5 

a partitioner configured to segment a digital signal; 

a segment-statistics calculator configured to calculate statistics of a segment that are representative of that 
segment; 

a segment quantizer configured to quantize such statistics of a segment 
w a signal marker configured to generate a marked signal approximately equivalents a combination of the digital 

signal and the combination of the quantized statistics of the one or more segments. 

67. A system as recited in claim 66, wherein the partitioner is further configured to pseudorandomly segment the signal. 

is 68. A system as recited in claim 66, wherein the partitioner is further configured to pseudorandomly segment the signal, 
wherein such segments are adjacent and non-contiguous. 

69. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
forms the method comprising: 

20 

obtaining a digital signal; 
obtaining a watermark; 

using quantization index modulation (QIM). watermarking the signal with the watermark, wherein such QIM is 
based upon non-local characteristics of the signal and the non-local characteristics are representative char- 
ts acteristics of more than a single element of a signal. 

70. A computer-readable medium having computer-executable instructions that, when executed by a computer, per- 
forms the method comprising: 

30 obtaining a digital signal; 

using quantization index modulation (QIM), detecting whether the signal includes a watermark, wherein such 
QIM is based upon non-local characteristics of the signal and the non-local characteristics are representative 
characteristics of more than a single element of a signal. 
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